
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.mft
File: 85A05B4BE012BF18A1139686B06217D2F16BE873.mft (raw, json)
Hash identifier: hvY2T70j4jiENw0ZWVl+pZ0OBiB4dBp8MzUygezigKI=
Subject key identifier: 40:43:A4:3A:FC:AD:27:95:4E:6D:03:08:4B:6D:F1:B6:12:4B:23:46
Authority key identifier: 85:A0:5B:4B:E0:12:BF:18:A1:13:96:86:B0:62:17:D2:F1:6B:E8:73
Certificate issuer: /CN=85A05B4BE012BF18A1139686B06217D2F16BE873
Certificate serial: 1B3972B7799045C7F0641B199C67E22AF506AB21
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85A05B4BE012BF18A1139686B06217D2F16BE873.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.mft
Manifest number: 0129
Signing time: Fri 24 Oct 2025 08:14:48 +0000
Manifest this update: Fri 24 Oct 2025 08:09:48 +0000
Manifest next update: Thu 30 Oct 2025 06:21:48 +0000
Files and hashes: 1: 34352e342e3136382e302f32322d3234203d3e20323635363738.roa (hash: +u3ds1VGdeHH/CWsbVJK8GLh4u3yhFf5/3TkdD+I3e0=)
2: 85A05B4BE012BF18A1139686B06217D2F16BE873.crl (hash: 0qOt22u+vNdBCApUjWsoUeU2e0HmhszwJo7QJUtUCFQ=)
3: 323830333a343163303a3a2f33322d313236203d3e20323635363738.roa (hash: mZkM+wCeZZ/cWB1epA2pKVifONvUQqkeVpJvKU35H1Y=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.crl
rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85A05B4BE012BF18A1139686B06217D2F16BE873.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:39:72:b7:79:90:45:c7:f0:64:1b:19:9c:67:e2:2a:f5:06:ab:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85A05B4BE012BF18A1139686B06217D2F16BE873
Validity
Not Before: Oct 24 08:09:48 2025 GMT
Not After : Oct 30 06:21:48 2025 GMT
Subject: CN=4043A43AFCAD27954E6D03084B6DF1B6124B2346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:4a:fa:33:86:53:18:01:53:5a:21:55:1e:
cb:ac:25:65:4c:05:8e:c7:e5:b5:40:12:5d:b8:4e:
09:a0:e7:e4:a3:78:08:72:22:cc:48:b2:cc:76:c8:
ab:53:42:e6:77:26:23:8e:f8:3d:dd:3a:ee:5a:68:
5a:f4:e6:06:51:3d:8f:a3:0c:d7:c7:ed:cb:83:0e:
bb:fe:f7:8c:95:b1:fa:28:6e:c5:52:82:e9:78:48:
56:d2:12:1b:c6:f2:1b:86:db:44:ab:2b:40:57:db:
ab:57:70:29:b3:c8:28:2a:46:92:9a:a5:5f:d6:57:
b3:0e:13:88:90:4f:07:66:be:69:cc:5f:80:25:95:
a6:2c:c4:d5:2e:2a:f3:b8:9a:17:45:60:aa:91:f4:
be:ee:d2:8a:c9:d4:27:aa:91:be:89:80:11:af:95:
6e:e8:6f:b9:60:b7:7e:4d:84:22:75:09:15:68:d0:
e9:07:ae:54:e6:70:02:6b:3d:3b:de:7b:a5:9e:d9:
b7:d3:c2:04:71:ba:ac:89:de:4c:10:fe:42:f8:66:
7f:ab:82:ec:c4:6c:d3:4a:ca:38:67:74:1f:47:13:
5e:d7:49:6c:ac:2f:d0:83:90:64:20:2c:af:31:23:
28:77:80:f3:0b:60:81:3b:b7:fb:eb:35:b8:e2:60:
c5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:43:A4:3A:FC:AD:27:95:4E:6D:03:08:4B:6D:F1:B6:12:4B:23:46
X509v3 Authority Key Identifier:
keyid:85:A0:5B:4B:E0:12:BF:18:A1:13:96:86:B0:62:17:D2:F1:6B:E8:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85A05B4BE012BF18A1139686B06217D2F16BE873.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:43:fc:98:68:92:f6:e6:8d:8b:31:4e:d6:9d:b6:cc:ad:d0:
20:55:d5:2e:e2:93:49:db:42:b3:aa:cb:26:1e:f6:4f:fd:ba:
53:30:72:5c:b5:fe:1d:3e:5d:8a:26:65:64:9d:47:0e:90:d5:
c5:0c:a0:20:e3:df:ed:91:b2:22:6d:41:04:20:31:1e:9c:69:
88:36:12:32:8b:9d:ab:87:12:9b:c7:02:f7:ae:da:f5:f6:69:
2d:df:2a:38:67:85:2d:eb:71:42:72:46:6d:e8:86:39:93:e5:
c3:24:20:23:04:e1:fb:e0:7b:58:88:7c:91:6d:74:cd:95:a6:
98:30:83:b5:bc:f4:0d:a9:b1:b0:4d:df:8e:bc:c2:51:73:d6:
c5:ca:1c:d9:de:88:be:f6:d3:cf:53:70:8d:a4:d5:50:66:4a:
78:1a:c2:ca:70:47:a3:bb:3d:60:d4:e5:76:5f:b7:05:dc:00:
4b:11:4e:1f:26:38:9a:de:75:4e:c6:8b:2b:52:50:3f:84:30:
d1:64:d9:d8:a0:89:38:7d:06:0a:7f:76:84:00:a9:ba:9b:78:
ea:d2:85:e4:ea:43:60:13:99:d0:a3:11:d2:7a:4a:75:82:3d:
6d:9e:8d:a0:22:a2:52:fc:63:8b:45:03:b4:77:7b:6c:52:28:
06:1e:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:34:23 2025 by rpki-client